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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the 

application: 
Listing of Claims: 

1 . (Currently Amended) A log acquisition method for acquiring a log during execution of a 
program which comprises functions that execute predetermined processes, comprising: 

a step of identifying a designated function of functions in an operating system, 
which are called upon execution of the program; and 

a step of rewriting addresses of the loaded functions that execute the 
predetermined processes, and an address of the designated function in the operating 
system to an address of a function for log acquisition, and 

the function for log acquisition, comprising: 

a step of calling the functions that execute the predetermined processes 

and the designated function in the operating system, making the functions execute 

the predetermined processes, and passing a received execution result to the 

program; 

a step of recording predetermined information upon calling the functions 
that execute the predetermined processes and the designated function in the 
operating system; [[and]] 

a step of recording predetermined information upon receiving the 
execution result; 

a step of defining one or a plurality of predetermined modules; and 
a step of determining whether or not a given function is called via the 
defined module, and in that when the function is called via the defined module, 
the predetermined information upon calling that function is excluded from a 
recording target . 

2. (Original) The method according to claim 1, wherein the predetermined information 
upon calling the functions that execute the predetermined processes and the designated 
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function in the operating system comprises at least one of function names of the called 
functions, a time upon calling, a parameter upon calling, and memory contents designated 
by a pointer parameter upon calling. 

3. (Original) The method according to claim 1, wherein the predetermined information 
upon receiving the execution result comprises at least one of a time upon reception, a 
parameter upon reception, a return value upon reception, and memory contents 
designated by a pointer parameter upon reception. 

4. (Original) The method according to claim 1 , wherein the addresses of the functions that 
execute the predetermined processes are described in an import function address table for 
respective dynamic link libraries that provide the functions. 

5. (Original) The method according to claim 1, further comprising, a step of selecting an 
address to be rewritten to the address of the function for log acquisition from the 
addresses of the functions that execute the predetermined processes, and 

in that the rewriting step includes a step of rewriting the address of the function selected 
in the selection step. 

6. (Cancelled). 

7. (Original) The method according to claim 1, further comprising: 

a step of defining one or a plurality of predetermined modules included in the 
operating system; and 

a step of determining whether or not a given function is called via the defined 
module, and in that when the function is called via a module included in the operating 
system other than the defined modules, the predetermined information upon calling that 
function is excluded from a recording target. 

8. (Original) The method according to claim 1, wherein when the predetermined 
information is a structure, information allocated at a position skipped by a size of the 
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structure from a head of a memory area where the structure is stored, is recorded in 
correspondence with a size designated in the structure. 



9. (Original) The method according to claim 1 , wherein when the predetermined 
information is a structure, information allocated at a position skipped by an offset 
designated in the structure from a head of a memory area where the structure is stored, is 
recorded as data of a defined data type. 

10. (Original) The method according to claim 1, wherein which of a plurality of pieces of 
predetermined information of functions of modules represents information of an object 
and which of them represents a class ID of the object are defined, and information of the 
object contained in the predetermined information of a function is recorded on the basis 
of the class ID of the object upon calling that function. 



1 1 . (Original) The method according to claim 1 , wherein which of a plurality of pieces of 
predetermined information of functions of modules represents information of an object 
and which of them represents an interface ID of the object are defined, and information of 
the object stored in the predetermined information of a function is recorded on the basis 
of the interface ID of the object upon calling that function. 

12. (Original) The method according to claim 1, wherein an additional definition of a 
module name corresponding to a library or each interface is prepared, and the module 
name is recorded with reference to the additional definition upon calling a function. 



13-25 (Cancelled). 
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